Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
File: oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json)
Hash identifier: lobRXaBAz7UKoac+Ok0r1T18dVlFfgnX6+N2crhvCcs=
Subject key identifier: 4E:32:82:A3:CB:D5:AA:29:97:1F:97:D4:4A:6C:FD:17:77:39:85:83
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial: 019E9AAA20C7476D03656D2920CF01981675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
Manifest number: 1056
Signing time: Sat 06 Jun 2026 02:01:41 +0000
Manifest this update: Sat 06 Jun 2026 02:01:41 +0000
Manifest next update: Sun 07 Jun 2026 02:01:41 +0000
Files and hashes: 1: Ao2Uwt4oKwQ1-c1Gu8SWHTMD-K8.roa (hash: uT0NSIRsA25cgjDuo3tHzZ3LPFFy7ZkJaOtpYRZPqbE=)
2: FFK9gE8hyXTY7YFIiYm0wiz9v_E.roa (hash: MdKubwj7D7j9Z7ZptXlKJ4OD1vPGntQ/LGawu6hO7EE=)
3: RD70gI6DbY3Y3IIxRA9flssalPw.roa (hash: yJ8sH45Tb62MqvEI7jo74oVGi/WCbsasTNuzFL7GWU0=)
4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: Ttw414mX9EqnoMvQWCIl241jrC94xCwxsfAzsQPS1is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9a:aa:20:c7:47:6d:03:65:6d:29:20:cf:01:98:16:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Validity
Not Before: Jun 6 02:01:41 2026 GMT
Not After : Jun 7 02:01:41 2026 GMT
Subject: CN=4e3282a3cbd5aa29971f97d44a6cfd1777398583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2b:bf:7e:a1:4f:68:7a:cd:db:fd:d9:3b:9d:
89:46:8e:b0:b9:7b:dd:31:cb:64:90:68:a0:75:61:
9b:a0:43:4c:eb:e1:5a:22:0a:dd:6a:fe:d7:50:9b:
ab:9d:0f:6a:9f:35:bf:59:46:96:92:08:e7:b4:e5:
a3:10:da:41:93:ac:6b:ce:e9:d8:91:e9:66:f7:bd:
71:52:39:3b:ed:6a:24:c4:ad:2d:a0:e5:39:4d:3d:
d2:76:08:00:fa:02:8c:18:d4:10:a6:da:91:5a:0a:
3f:05:c8:5b:f5:04:c9:d7:88:b0:f9:87:d1:fa:bf:
4d:bf:c1:84:11:f0:c9:e1:43:b3:75:cc:78:ce:56:
77:08:a2:b6:08:48:79:ce:4a:1d:86:3b:b1:aa:ce:
2c:40:e9:ee:60:d8:c4:ec:ed:d3:1a:13:5a:41:bd:
1c:65:7c:c1:80:1f:94:7f:4b:fd:3d:51:72:65:5a:
cf:02:71:c1:e6:28:37:d2:0e:d7:c0:5a:5d:fb:60:
12:ab:b0:f2:71:79:fa:cf:f1:0a:62:36:e5:7b:5b:
3e:76:fd:37:23:61:7f:06:e1:63:28:7b:5e:fb:81:
0e:69:a8:e1:bf:80:f1:84:75:6e:f5:79:66:83:cf:
47:b1:8e:5b:cb:33:26:74:62:54:e2:42:4f:4c:43:
17:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:32:82:A3:CB:D5:AA:29:97:1F:97:D4:4A:6C:FD:17:77:39:85:83
X509v3 Authority Key Identifier:
keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:cc:1e:43:b3:81:c3:da:8b:57:3b:69:8a:3d:24:b7:13:fb:
88:ec:bc:55:14:a0:86:e7:32:13:3c:04:49:f2:90:f5:2f:01:
93:05:fe:d4:8f:c6:af:f7:0d:2b:b4:c2:1c:da:33:11:a1:19:
71:a8:31:8a:42:7d:4a:4c:c0:e6:e9:f9:d7:b1:36:74:cf:32:
7b:6c:46:21:96:55:68:60:0e:db:18:ed:5a:5b:f0:59:41:28:
53:b6:96:45:53:b9:83:2a:af:fd:b1:0d:85:f7:73:b8:de:f4:
41:bd:40:c4:29:de:16:fa:1d:0c:b8:88:58:3f:e8:e7:0d:20:
04:03:ef:86:b9:bd:c7:c8:3a:df:20:99:2f:e5:51:6b:e7:2b:
65:42:f0:97:bf:14:76:95:44:08:26:e4:28:ef:47:7f:44:7b:
1d:05:8d:77:31:c5:ff:e6:7c:e2:ae:eb:94:3c:20:e7:d8:e1:
8e:1a:9c:db:f4:a7:26:f1:05:95:40:3b:1a:93:44:b1:3c:4b:
35:0a:35:e2:c2:48:13:b7:31:14:6d:b9:ca:73:0b:36:19:c4:
09:12:c7:de:64:59:43:c1:62:3b:19:f6:90:bf:3d:b1:72:64:
9c:3c:ff:c0:f0:7b:19:c5:7a:12:2d:9c:7f:4d:91:9f:a1:a9:
7f:90:25:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:14:40 2026 by rpki-client